Outt
Sett
Behavioral task
behavioral1
Sample
be052a0a8ab1e55332fc265ba5cd5cdf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be052a0a8ab1e55332fc265ba5cd5cdf_JaffaCakes118
Size
79KB
MD5
be052a0a8ab1e55332fc265ba5cd5cdf
SHA1
f126fffdb1ffdbca0590c36e63a52a8f68db041f
SHA256
65e535bfb2688ffb9a0453f7b05be250585b187242a041490bbb7d4d26d2e963
SHA512
a429586442aab9018b400024c17cef70e10401e8cca5e742ccd540ed59a782b415112f099eeebe7104689c9297f306a0889e5eb5ce52d9754f5d3b58622490d8
SSDEEP
1536:Cn5P0l70x5CJpVxqojy6HAwPRR/wUfin6wr6FWHT/s3iKxdUf39bU5LNd:w5s70x4JpVsojPFX/366vcs3n/kVURNd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be052a0a8ab1e55332fc265ba5cd5cdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ